SDN VXLAN missing Gateway

Dec 3, 2025
6
2
3
Hello,

I created in a fresh new test cluster with 4 nodes (pve 9.2.4) sdn with vxlan.

- first a new zone with mtu 1450 an ip-addresses of all nodes (no fabric, no dns)
- a new vnet attached to the new zone (no isolation, no vlan aware)
- two subnets with gateway information (no dhcp)

I created to windows vms in the different subnets but they were unable to ping each other. They were even unable to reach the gateway. With ips on the same subnet the vms are reachable to each other. It seems that there were no gateways created automatically. Every setup guide I read did not mention this.

Do we have to manually create a gateway or am I missing something?

Thank you in advance!

Best regards
Patrick
 
In Layer-2 zones (VLAN, QinQ, VXLAN), the subnet configuration does not get applied on the host itself. If you want to have a router inside the VXLAN zone, then I'd recommend setting up an external router with a VTEP that handles routing.
 
Thank you for your response.

In every guide I followed regarding VXLAN this was not mentioned even in the official documentation I couldn´t find anything about setting up a router required for VXLAN...
 
If you require a gateway then EVPN is essentially that - it's a VXLAN zone that provides an anycast gateway that provides outbound routing / routing between VNets. It adds more complexity to the setup though, so if you don't want to manage that then setting up an external router inside the VXLAN zone is the way to go.
 
Okay, so the gateway information while setup VXLAN subents is nothing that creates a gateway it is just the information propagated through DHCP, right? Maybe a notice on that on the documentation would be helpfull...

Thank you.